Your information

Privacy policy

Updated November 14, 2026. This English policy describes the existing BilzUp service and the US-dollar bill workflow.

1. Who is responsible?

Multibrands.Software UG (haftungsbeschränkt), Gimpelstr. 18, 49661 Cloppenburg, Germany, is responsible for the processing described here. Contact hello@bilzup.com with privacy questions.

2. The essentials

3. Hosting and logs

The website, app and database are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A processing agreement applies under Article 28 GDPR. Server logs include IP address, request time and URL, status, data volume, referrer, browser and operating system. They support security and reliability under Article 6(1)(f) GDPR and are deleted after 14 days. Abuse-prevention counters for sign-in and uploads are held in memory for up to one hour.

4. Cookies and local storage

Signing in sets the necessary bz_sess cookie, containing a random session identifier. It lasts up to 30 days or until sign-out. The service worker caches application files for the installable app; API responses are not cached. Temporary navigation information may be stored in your browser session. No advertising or analytics cookies are used.

5. Your account

We process your email, securely hashed password, first and last name, city, optional phone number, account role and registration and email-confirmation dates to provide the service under Article 6(1)(b) GDPR. Account information is retained until you delete your account, subject to required record retention.

6. Identity and address verification

For manual identity verification, applicants submit the front of an identity document, a selfie holding that document, their legal name and date of birth. A reviewer compares the information and images. You may cover the document number and unrelated fields. The images are deleted after the decision; name, date of birth, decision and review date remain. Manual review does not use automated biometric analysis.

If Stripe Identity is enabled, Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, performs the check. Stripe may compare identity and selfie images automatically with your explicit consent. BilzUp receives the result, name and date of birth. Optional address verification processes your street, city, state, ZIP code, country and proof of address. The proof is deleted after review; the verified address remains. Processing supports the service and fraud prevention under Articles 6(1)(b) and 6(1)(f) GDPR. Biometric consent, where applicable, is obtained by Stripe.

7. Bills and issuer payment details

We process the uploaded bill, category, title, explanation, amount, currency, issuer name, payment reference and due date. US payment details include the issuer account holder, routing number, account number and account type. These details are encrypted at rest and are accessible only to authorized administrators for bill review and payment arrangements. Older euro bills may retain their original IBAN details.

Supporters see a summary: category, amount, currency, title, story, due date, issuer name, your first name, location and verification level. Do not include extra personal details in your story. Reviewers may remove such details before publication.

Bill documents are deleted 90 days after the outgoing payment, or 30 days after rejection or withdrawal. Paid-bill records may be retained for legally required accounting periods, up to 10 years under the existing retention policy. When an account is deleted, documents and US bank-detail records are removed, subject to completing pending payments and applicable retention obligations. The issuer receives a payment reference that allows it to match the payment to the bill.

8. Payment processing

Supporter card payments are processed through Stripe. We send the amount, currency, payment description and email address to Stripe. You enter card details in Stripe's checkout; BilzUp does not receive your full card number. Stripe has its own responsibilities for processing and may process information outside your country. See Stripe's privacy policy for its practices and transfer safeguards. Processing supports the payment arrangement under Article 6(1)(b) GDPR. Outgoing payments to issuers are arranged by BilzUp's team.

9. Service emails

We send messages needed for email verification, password resets, bill reviews and payment updates. These form part of the service under Article 6(1)(b) GDPR. Our mailbox is hosted by Hetzner in Germany.

10. Security

The deployed service uses TLS for transport. Uploaded files and US bank details use AES-256-GCM encryption at rest. Administrator access to identity documents and issuer payment details is logged.

11. Your rights

Under applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may withdraw consent for future processing. Delete your account in Account settings, or email us with a request. You may also complain to a supervisory authority, including the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany. Rights under GDPR include Articles 15–21.

12. Updates

We update this policy when the service or applicable requirements change. The current version is published here.